Ubuntu
linux-azure-5.13 package

linux-azure-5.13 5.13.0-1017.19~20.04.1 source package in Ubuntu

Changelog

linux-azure-5.13 (5.13.0-1017.19~20.04.1) focal; urgency=medium

  [ Ubuntu: 5.13.0-1017.19 ]

  * CVE-2022-0847
    - lib/iov_iter: initialize "flags" in new pipe_buffer

linux-azure-5.13 (5.13.0-1016.18~20.04.1) focal; urgency=medium

  [ Ubuntu: 5.13.0-1016.18 ]

  * CVE-2022-23960
    - [Config] azure: Set CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY
  * CVE-2022-23960
    - arm64: assembler: add set_this_cpu_offset
    - arm64: insn: Add barrier encodings
    - arm64: add ID_AA64ISAR2_EL1 sys register
    - arm64: Add Neoverse-N2, Cortex-A710 CPU part definition
    - arm64: Add Cortex-X2 CPU part definition
    - arm64: Add Cortex-A510 CPU part definition
    - SAUCE: arm64: entry.S: Add ventry overflow sanity checks
    - SAUCE: arm64: spectre: Rename spectre_v4_patch_fw_mitigation_conduit
    - SAUCE: KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A
    - SAUCE: arm64: entry: Make the trampoline cleanup optional
    - SAUCE: arm64: entry: Free up another register on kpti's tramp_exit path
    - SAUCE: arm64: entry: Move the trampoline data page before the text page
    - SAUCE: arm64: entry: Allow tramp_alias to access symbols after the 4K
      boundary
    - SAUCE: arm64: entry: Don't assume tramp_vectors is the start of the vectors
    - SAUCE: arm64: entry: Move trampoline macros out of ifdef'd section
    - SAUCE: arm64: entry: Make the kpti trampoline's kpti sequence optional
    - SAUCE: arm64: entry: Allow the trampoline text to occupy multiple pages
    - SAUCE: arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations
    - SAUCE: arm64: entry: Add vectors that have the bhb mitigation sequences
    - SAUCE: arm64: entry: Add macro for reading symbol addresses from the
      trampoline
    - SAUCE: arm64: Add percpu vectors for EL1
    - SAUCE: arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of
      Spectre-v2
    - SAUCE: arm64: Mitigate spectre style branch history side channels
    - SAUCE: KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and
      migrated
    - SAUCE: arm64: Use the clearbhb instruction in mitigations
    - [Config]: set CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY=y
  * CVE-2022-25636
    - netfilter: nf_tables_offload: incorrect flow offload action array size
  * CVE-2022-0001
    - x86,bugs: Unconditionally allow spectre_v2=retpoline,amd
    - SAUCE: x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE
    - SAUCE: x86/speculation: Add eIBRS + Retpoline options
    - SAUCE: Documentation/hw-vuln: Update spectre doc

 -- Stefan Bader <email address hidden>  Mon, 07 Mar 2022 12:19:37 +0100

Upload details

Uploaded by:
Stefan Bader
Uploaded to:
Focal
Original maintainer:
Ubuntu Kernel Team
Architectures:
all amd64 arm64
Section:
devel
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Focal: [FULLYBUILT] amd64 [FULLYBUILT] arm64

Downloads

File Size SHA-256 Checksum
linux-azure-5.13_5.13.0.orig.tar.gz 180.9 MiB 324d8967fbda539731a71a1a2fd469c85eda0a6459c8b172e84a8d20cda410b3
linux-azure-5.13_5.13.0-1017.19~20.04.1.diff.gz 10.4 MiB f6462f0a6a9ccc14a4f99f961c99d194d86fc96aea4341e45d109e1bae1314f2
linux-azure-5.13_5.13.0-1017.19~20.04.1.dsc 4.5 KiB 730faf7778acf3f1b7fbbce9a24342aaed9f6df2e81c65ff6207a1e3a8307ceb

View changes file

Binary packages built by this source

linux-azure-5.13-cloud-tools-5.13.0-1017: Linux kernel version specific cloud tools for version 5.13.0-1017

 This package provides the architecture dependant parts for kernel
 version locked tools for cloud tools for version 5.13.0-1017 on
 ARMv8.
 You probably want to install linux-cloud-tools-5.13.0-1017-<flavour>.

linux-azure-5.13-headers-5.13.0-1017: Header files related to Linux kernel version 5.13.0

 This package provides kernel header files for version 5.13.0, for sites
 that want the latest kernel headers. Please read
 /usr/share/doc/linux-azure-5.13-headers-5.13.0-1017/debian.README.gz for details

linux-azure-5.13-tools-5.13.0-1017: Linux kernel version specific tools for version 5.13.0-1017

 This package provides the architecture dependant parts for kernel
 version locked tools (such as perf and x86_energy_perf_policy) for
 version 5.13.0-1017 on
 ARMv8.
 You probably want to install linux-tools-5.13.0-1017-<flavour>.

linux-buildinfo-5.13.0-1017-azure: Linux kernel buildinfo for version 5.13.0 on ARMv8 SMP

 This package contains the Linux kernel buildinfo for version 5.13.0 on
 ARMv8 SMP.
 .
 You likely do not want to install this package.

linux-cloud-tools-5.13.0-1017-azure: Linux kernel version specific cloud tools for version 5.13.0-1017

 This package provides the architecture dependant parts for kernel
 version locked tools for cloud for version 5.13.0-1017 on
 ARMv8.

linux-headers-5.13.0-1017-azure: Linux kernel headers for version 5.13.0 on ARMv8 SMP

 This package provides kernel header files for version 5.13.0 on
 ARMv8 SMP.
 .
 This is for sites that want the latest kernel headers. Please read
 /usr/share/doc/linux-headers-5.13.0-1017/debian.README.gz for details.

linux-image-unsigned-5.13.0-1017-azure: Linux kernel image for version 5.13.0 on ARMv8 SMP

 This package contains the unsigned Linux kernel image for version 5.13.0 on
 ARMv8 SMP.
 .
 Supports Azure processors.
 .
 Geared toward Azure systems.
 .
 You likely do not want to install this package directly. Instead, install
 the linux-azure meta-package, which will ensure that upgrades work
 correctly, and that supporting packages are also installed.

linux-image-unsigned-5.13.0-1017-azure-dbgsym: Linux kernel debug image for version 5.13.0 on ARMv8 SMP

 This package provides the unsigned kernel debug image for version 5.13.0 on
 ARMv8 SMP.
 .
 This is for sites that wish to debug the kernel.
 .
 The kernel image contained in this package is NOT meant to boot from. It
 is uncompressed, and unstripped. This package also includes the
 unstripped modules.

linux-modules-5.13.0-1017-azure: Linux kernel extra modules for version 5.13.0 on ARMv8 SMP

 Contains the corresponding System.map file, the modules built by the
 packager, and scripts that try to ensure that the system is not left in an
 unbootable state after an update.
 .
 Supports Azure processors.
 .
 Geared toward Azure systems.
 .
 You likely do not want to install this package directly. Instead, install
 the linux-azure meta-package, which will ensure that upgrades work
 correctly, and that supporting packages are also installed.

linux-modules-extra-5.13.0-1017-azure: Linux kernel extra modules for version 5.13.0 on ARMv8 SMP

 This package contains the Linux kernel extra modules for version 5.13.0 on
 ARMv8 SMP.
 .
 Also includes the corresponding System.map file, the modules built by the
 packager, and scripts that try to ensure that the system is not left in an
 unbootable state after an update.
 .
 Supports Azure processors.
 .
 Geared toward Azure systems.
 .
 You likely do not want to install this package directly. Instead, install
 the linux-azure meta-package, which will ensure that upgrades work
 correctly, and that supporting packages are also installed.

linux-tools-5.13.0-1017-azure: Linux kernel version specific tools for version 5.13.0-1017

 This package provides the architecture dependant parts for kernel
 version locked tools (such as perf and x86_energy_perf_policy) for
 version 5.13.0-1017 on
 ARMv8.